Encryption
Sensitive metadata such as login, passwords, and tokens is transmitted using 2048 bit RSA keys. Stored collateral is encrypted with AES and its own unique key. SSL can be enabled for all communication.
Security
Trust begins with secure data.
Go Digital Science takes security seriously, using enterprise level protections, encryption, testing, and access controls.
- 2048 bit
- RSA keys for sensitive metadata
- AES
- Encryption for stored content
- 20
- Digit unique URL schema
- SOC 2
- Conformity completed in 2013
Platform protections
Security built into the product.
The original security page described encryption, unique URLs, password features, ongoing testing, permissions, and availability.
Unique URLs
Email pitches use a unique 20 digit URL schema, giving each link a very large combination space so content reaches the intended audience.
Advanced passwords
Optional password enhancement requires a change every 90 days, blocks the previous six passwords, requires at least eight complex characters, and limits changes to once a day.
Ongoing testing
Weekly vulnerability scanning, always on application security testing, frequent penetration testing, and static code analysis support the development lifecycle.
Group permissions
Users, groups, and roles such as Admin and Group Admin can set discrete permissions for content, tags, analytics, and other platform areas.
Resilient platform
Relationships with top data center providers and distributed denial of service protection support availability when customers need it.
Standards and practice
Aligned with recognized security guidance.
Encryption choices follow guidance from NIST, including the use of AES rather than 3DES for stored content. Testing looks for the most common threat categories identified by the OWASP Top Ten and the Web Application Security Consortium Top 25.
The company completed SOC 2 conformity in 2013 and earned TRUSTe U.S. and EU Safe Harbor status in 2013, as recorded in the original press archive.
Need a review
Talk with the security team.
For a security questionnaire, architecture review, or compliance conversation, contact us and we will route the request to the right team.
Start a security conversationEnterprise ready
Security that supports the selling process.
Review the platform, the controls, and the path to adoption with our team.